Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32332d3233203d3e20323634393336.roa
File: 3136382e3233322e38302e302f32332d3233203d3e20323634393336.roa (raw, json)
Hash identifier: uOMlG7emJhAcOmnt2y63/gr5exheo0/CTQ7G3xlBGlo=
Subject key identifier: 30:41:F4:F1:A6:4B:D4:31:A4:2D:C7:3E:49:78:F3:1B:69:6E:E4:A3
Certificate issuer: /CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Certificate serial: 794D490D48C40A57525861FE2AC5914619E238A1
Authority key identifier: D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32332d3233203d3e20323634393336.roa
Signing time: Wed 01 Oct 2025 22:07:09 +0000
ROA not before: Wed 01 Oct 2025 22:02:09 +0000
ROA not after: Wed 30 Sep 2026 22:07:09 +0000
asID: 264936
IP address blocks: 168.232.80.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4d:49:0d:48:c4:0a:57:52:58:61:fe:2a:c5:91:46:19:e2:38:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC
Validity
Not Before: Oct 1 22:02:09 2025 GMT
Not After : Sep 30 22:07:09 2026 GMT
Subject: CN=3041F4F1A64BD431A42DC73E4978F31B696EE4A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:25:6c:02:ea:d5:11:b5:5b:07:4c:6c:42:
10:1b:2a:66:0f:76:33:94:f6:a8:64:78:51:4f:9d:
4a:24:9e:7e:9f:3d:96:9a:83:31:8f:2b:61:cf:78:
98:ca:72:46:f7:8b:90:1f:3b:2e:be:08:69:0e:c6:
54:cc:1d:ba:91:fa:fc:dd:46:50:68:2c:3b:4c:39:
f6:8b:50:18:53:23:aa:21:3e:e1:12:d9:f4:70:cd:
80:fd:e2:f1:0b:6c:1f:d5:af:6c:17:cf:40:51:57:
88:a9:f6:1c:62:d6:49:45:48:96:1b:07:95:02:3f:
2e:a6:26:6f:ad:f6:6b:1d:04:8d:d8:3b:ce:ca:22:
3d:b2:2e:c0:49:af:97:63:be:70:54:f8:4d:81:87:
e5:ea:a6:30:33:8c:d2:53:86:44:85:20:56:ee:40:
98:28:df:b3:83:1d:49:11:08:ff:fb:53:0c:e0:20:
9c:fe:fc:1b:60:87:59:97:65:a7:e7:2c:fa:be:dd:
37:78:e9:a6:66:06:de:33:bc:93:86:97:7d:cc:11:
44:a6:bc:81:db:41:a5:e7:b2:5f:0b:00:b1:43:c0:
52:f1:c0:09:72:79:71:bf:96:75:c7:f1:40:0b:e2:
17:09:1f:d1:76:dc:7b:42:6d:96:03:7b:a4:fc:9a:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:41:F4:F1:A6:4B:D4:31:A4:2D:C7:3E:49:78:F3:1B:69:6E:E4:A3
X509v3 Authority Key Identifier:
keyid:D9:AE:EE:7B:CB:3D:81:EA:AD:61:F0:7F:69:A9:B0:59:78:F5:80:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9AEEE7BCB3D81EAAD61F07F69A9B05978F580EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3136382e3233322e38302e302f32332d3233203d3e20323634393336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.232.80.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:41:0c:7f:fd:9b:cf:5a:3e:af:8a:59:9b:0a:16:4d:95:f9:
11:08:52:36:3b:63:69:b3:43:2c:0e:ff:30:be:d0:a3:7b:fe:
cc:07:78:26:c0:5e:83:9d:99:50:c3:40:b3:d7:22:e2:ff:c7:
04:85:25:77:43:e4:6f:cb:c3:b2:ea:bd:1b:44:ce:52:f4:3f:
13:68:16:2c:65:a4:42:89:0a:29:16:01:14:26:48:44:5d:9e:
d2:ac:ec:a4:fe:b1:fd:bd:d2:f7:a7:19:71:06:d1:4e:79:f2:
bd:7f:d5:bb:f9:f8:df:f3:60:a7:a5:40:8a:67:df:e7:19:68:
e0:2c:65:79:41:3b:7a:a9:6f:f6:ba:f9:a5:d1:5b:74:68:0a:
b6:f1:44:89:de:95:2d:d1:84:57:55:92:b8:7f:17:48:2a:8b:
ca:42:c8:e8:36:a8:05:20:79:84:e0:48:0b:58:a8:eb:cc:55:
88:8b:f9:b1:d7:70:30:a7:4d:10:99:c1:2e:ee:c6:d6:24:5a:
29:f8:a9:10:c5:15:1e:4e:75:c9:35:0c:42:8d:e2:a1:3b:9d:
0a:fb:62:a5:8f:7d:d1:4d:db:1c:ae:6e:aa:d5:d1:24:40:2c:
2b:4b:02:4d:53:c2:00:da:ba:0d:fd:ba:de:de:e1:af:83:b8:
10:75:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:07 2025 by rpki-client